v1.6.2

update deps

v1.6.1

What's Changed

• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #2

v1.6.0

• Add separate timeout for initramfs rebuild
• Add support for ssh keepalives

v1.5.0

Add -rebuild-initramfs flag for current-kernel-only rebuild

Passing -rebuild-initramfs with -fix regenerates the initramfs for the currently running kernel only (update-initramfs -u -k $(uname -r) on Debian/Ubuntu, dracut -f --kver $(uname -r) on RHEL/Fedora).

v1.4.0

fix: align CVE-2026-43284 module list with vendor guidance

Swap xfrm_algo for ipcomp4/ipcomp6 per Red Hat, Ubuntu, and AWS recommendations. Blocking the framework module is over-broad; the ESP and IPComp protocol modules plus xfrm_user are sufficient.

v1.3.0

Add -unload option (to be used only together with -fix).

With -fix -unload, vcheck also tries to unload affected modules that were loaded before the fix, then uses the final scan to verify whether they are still loaded.

v1.2.0

Add option to skip checking logs (-skip-logs). This should speed-up detection and applying fixes. Use only if you do not care whether the modules were loaded in the past, or you did additional investigation by yourself or using other tools.

v1.1.5

Changelog

• • ce44114e fix: pin host-key algorithms to those recorded in known_hosts

v1.1.4

Changelog

• • 17d51488 perf: use journalctl --grep instead of piping -k through external grep

v1.1.3

• fix: don't fail the scan on hosts where ss lacks --af-alg support